Legal
Privacy notice
How we handle personal data, written in plain language. Last updated 20 August 2026.
This notice explains how AI Consultant Kenya (“we”) collects, uses and protects personal data. It is written to meet our obligations under the Kenya Data Protection Act, 2019.
Who we are
AI Consultant Kenya is an artificial intelligence and automation consultancy based in Nairobi, Kenya. For any question about this notice or about how we handle your data, contact us at [email protected] or +254 711 362 029.
What we collect
When you contact us. Through the enquiry form, WhatsApp, email or phone, we collect your name, email address, phone number, organisation, and whatever you choose to tell us about your business need. We collect this because you have asked us to respond — our lawful basis is your request and, where an engagement follows, the performance of a contract.
When you use this website. Our web server keeps standard access logs including IP address, browser type, pages requested and timestamps. These are used to keep the site secure and working, on the basis of our legitimate interests.
Analytics. If website analytics are enabled, they are configured to measure how the site is used in aggregate. We do not use analytics to identify individual visitors, and we do not run advertising or cross-site tracking pixels on this site.
Client data during an engagement. If you become a client, we may process personal data belonging to your customers, members, patients or staff in order to deliver the work. In that situation you are the data controller and we act as a data processor under a written agreement that sets out exactly what we may do with it.
Cookies and local storage
This site sets a session cookie on the contact page, which exists only to protect the form against automated abuse. Your light or dark theme preference is stored locally in your own browser and is never transmitted to us. If analytics are enabled, the analytics provider may set its own cookies; you can block these in your browser without affecting how the site works.
How we use it
- To reply to your enquiry and to have a useful first conversation.
- To prepare proposals and to deliver work you have engaged us for.
- To send invoices and keep the accounting records the law requires.
- To keep this website secure and functioning.
We do not sell personal data. We do not share it with third parties for their own marketing. We do not add you to a mailing list because you sent an enquiry.
Who else sees it
We use a small number of service providers to run our business — website hosting, email, and standard office software. Each processes data on our instructions under its own contractual terms. Some are located outside Kenya; where that is the case, the transfer is made on the basis of appropriate safeguards as required by the Data Protection Act, 2019.
We may disclose information where we are legally required to do so.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Client records: for the duration of the engagement and for as long afterwards as tax and company law require, currently seven years for financial records.
- Website access logs: a short rolling period for security purposes.
- Client data processed during a project: as agreed in the relevant data processing agreement, and deleted or returned at the end of the engagement.
Your rights
Under the Kenya Data Protection Act, 2019 you have the right to be informed about how your data is used, to access the personal data we hold about you, to have inaccurate data corrected, to object to certain processing, and to request deletion in defined circumstances.
To exercise any of these, email [email protected]. We will respond within the period the Act allows and will not charge you for a reasonable request.
If you are not satisfied with how we have handled your data, you may complain to the Office of the Data Protection Commissioner (ODPC) of Kenya.
Security
We use access controls, encryption in transit, and least-privilege principles across the systems we operate. During client engagements we work inside the client’s own accounts wherever practical rather than copying data to ours, and where a copy is unavoidable we agree in writing what is copied, where it is held, who may access it and when it is deleted.
AI and this website
We build AI systems, so it is fair for you to ask what this site does. This website does not use AI to profile visitors, and nothing you submit through the contact form is used to train any model. Enquiries are read by a person.
Changes
If we change this notice we will update the date at the top of this page. Material changes affecting existing clients will be communicated directly.
Questions about this notice? Email [email protected] or WhatsApp +254 711 362 029.